This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3098/L-vlUoFbxA3Pl5d1IHVdVRQrwY0.roa File: L-vlUoFbxA3Pl5d1IHVdVRQrwY0.roa (raw, json) Hash identifier: HPwfchENkzzKRHdVnx6VtTjvwKB1onI57V+PHLUmzew= Subject key identifier: 2F:EB:E5:52:81:5B:C4:0D:CF:97:97:75:20:75:5D:55:14:2B:C1:8D Certificate issuer: /CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Certificate serial: 8AF2 Authority key identifier: D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/L-vlUoFbxA3Pl5d1IHVdVRQrwY0.roa Signing time: Wed 10 Dec 2025 04:17:52 +0000 ROA not before: Wed 10 Dec 2025 04:17:52 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 4812 IP address blocks: 2407:9b40::/32 maxlen: 64 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 35570 (0x8af2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2AB6C9B6E165334C032D051D5FC7D1547E4E353 Validity Not Before: Dec 10 04:17:52 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=2FEBE552815BC40DCF97977520755D55142BC18D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:44:ec:bc:88:95:a4:85:d4:18:5e:a7:57:46: 30:d2:76:e1:ff:b8:10:40:45:2c:9f:84:45:a0:8c: f9:d8:02:1d:2f:3f:d0:a8:57:62:cf:7a:0e:93:93: a6:72:b7:d5:78:77:48:f1:b2:e3:ee:b4:a0:b1:59: 93:c3:6d:73:8d:d2:4a:9e:06:e4:43:0d:42:b4:da: 20:0b:dd:7a:97:48:ba:3e:86:b2:9d:d9:33:61:6d: c7:27:32:26:4a:83:92:9c:c1:f3:d5:83:92:ed:89: 49:a8:a4:5d:56:0d:c1:0a:7c:1d:59:4a:90:e3:ae: 1f:96:ca:b0:c7:ef:fe:65:f4:c4:13:d0:ab:ae:65: 6f:fd:11:a1:4b:76:88:73:64:57:cb:f3:52:99:c0: f9:9b:b3:69:a7:de:aa:12:50:9e:b3:6c:22:0f:1a: 52:13:71:46:35:af:4e:31:be:c9:77:2b:7b:5c:50: 25:db:e9:dd:02:4b:17:e5:3f:74:83:8a:eb:b8:7c: 07:82:fd:ca:8a:d0:40:1e:43:af:ff:60:50:2d:b0: 88:71:8c:60:1c:22:b0:0c:c0:09:54:f3:26:55:4a: a7:fd:ca:b3:41:fd:0d:4d:bc:c2:59:1d:2e:8a:7c: 76:df:6d:ed:48:df:8a:84:26:4a:66:5f:2b:53:d9: 73:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EB:E5:52:81:5B:C4:0D:CF:97:97:75:20:75:5D:55:14:2B:C1:8D X509v3 Authority Key Identifier: keyid:D2:AB:6C:9B:6E:16:53:34:C0:32:D0:51:D5:FC:7D:15:47:E4:E3:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/0qtsm24WUzTAMtBR1fx9FUfk41M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/0qtsm24WUzTAMtBR1fx9FUfk41M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3098/L-vlUoFbxA3Pl5d1IHVdVRQrwY0.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2407:9b40::/32 Signature Algorithm: sha256WithRSAEncryption 03:13:06:87:54:8e:24:73:d6:dc:1f:85:5e:32:32:06:91:d5: 94:c8:fa:e8:fb:60:11:8a:5e:59:21:55:bb:30:18:e5:f8:49: 21:c0:e7:4e:a9:f5:95:72:c3:1d:53:eb:9e:dd:4e:61:90:35: 43:6c:c4:4f:9d:28:f0:15:b6:14:f2:ae:1a:cc:f1:d4:11:d0: a6:ed:e2:fa:5e:fd:ed:8c:77:5b:83:24:5b:73:e9:bf:63:85: a9:f9:d1:2a:37:9f:5c:0a:53:17:a0:46:4b:4f:46:12:6a:f0: a1:50:6e:ad:83:8f:90:94:ba:ef:7a:ae:06:2a:3e:d7:0f:c1: 33:9b:cc:10:58:eb:7b:a0:8d:76:f3:7d:4d:d7:ec:05:f9:7b: 7b:49:03:67:78:a9:f4:c0:d2:67:b3:be:24:3d:72:05:96:92: b3:64:80:14:ab:6e:67:b2:40:25:bd:f4:14:ec:7d:23:3a:b4: 1b:85:80:2a:fd:2e:ca:b6:a8:57:27:94:4f:b9:f4:1f:5a:ab: f9:77:0e:9e:c5:ef:27:4a:2f:2a:1c:01:0e:49:a2:d9:c2:f8: ee:40:73:ed:78:cf:3e:3a:83:99:9e:8d:11:19:cc:1e:38:05: 1c:11:55:e5:ca:1a:b5:73:e2:6f:7e:87:26:27:b2:2e:15:15: c9:3b:4a:f2 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIDAIryMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKEQy QUI2QzlCNkUxNjUzMzRDMDMyRDA1MUQ1RkM3RDE1NDdFNEUzNTMwHhcNMjUxMjEw MDQxNzUyWhcNMjYxMDIzMDMwMTAzWjAzMTEwLwYDVQQDEygyRkVCRTU1MjgxNUJD NDBEQ0Y5Nzk3NzUyMDc1NUQ1NTE0MkJDMThEMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA9kTsvIiVpIXUGF6nV0Yw0nbh/7gQQEUsn4RFoIz52AIdLz/Q qFdiz3oOk5OmcrfVeHdI8bLj7rSgsVmTw21zjdJKngbkQw1CtNogC916l0i6Poay ndkzYW3HJzImSoOSnMHz1YOS7YlJqKRdVg3BCnwdWUqQ464flsqwx+/+ZfTEE9Cr rmVv/RGhS3aIc2RXy/NSmcD5m7Npp96qElCes2wiDxpSE3FGNa9OMb7Jdyt7XFAl 2+ndAksX5T90g4rruHwHgv3KitBAHkOv/2BQLbCIcYxgHCKwDMAJVPMmVUqn/cqz Qf0NTbzCWR0uinx2323tSN+KhCZKZl8rU9lzxQIDAQABo4IB9DCCAfAwHQYDVR0O BBYEFC/r5VKBW8QNz5eXdSB1XVUUK8GNMB8GA1UdIwQYMBaAFNKrbJtuFlM0wDLQ UdX8fRVH5ONTMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYDVR0fBFYwVDBS oFCgToZMcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMw OTgvMHF0c20yNFdVelRBTXRCUjFmeDlGVWZrNDFNLmNybDBjBggrBgEFBQcBAQRX MFUwUwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8wcXRzbTI0V1V6VEFNdEJSMWZ4OUZVZms0MU0uY2VyMA4GA1UdDwEB /wQEAwIHgDCBnQYIKwYBBQUHAQsEgZAwgY0wWAYIKwYBBQUHMAuGTHJzeW5jOi8v cnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMDk4L0wtdmxVb0ZieEEz UGw1ZDFJSFZkVlJRcndZMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5j bm5pYy5jbi9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkB5tAMA0GCSqGSIb3DQEBCwUAA4IBAQADEwaHVI4kc9bcH4VeMjIGkdWU yPro+2ARil5ZIVW7MBjl+EkhwOdOqfWVcsMdU+ue3U5hkDVDbMRPnSjwFbYU8q4a zPHUEdCm7eL6Xv3tjHdbgyRbc+m/Y4Wp+dEqN59cClMXoEZLT0YSavChUG6tg4+Q lLrveq4GKj7XD8Ezm8wQWOt7oI12831N1+wF+Xt7SQNneKn0wNJns74kPXIFlpKz ZIAUq25nskAlvfQU7H0jOrQbhYAq/S7KtqhXJ5RPufQfWqv5dw6exe8nSi8qHAEO SaLZwvjuQHPteM8+OoOZno0RGcweOAUcEVXlyhq1c+JvfocmJ7IuFRXJO0ry -----END CERTIFICATE-----Generated at Wed Dec 10 06:40:17 2025 by rpki-client